Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/48cee960-b130-391b-9cc3-54cb03cd7a9b.roa
File:                     48cee960-b130-391b-9cc3-54cb03cd7a9b.roa (raw, json)
Hash identifier:          kaEfTEiIXrcFVbMbSuXp8cfK6gGScN3JYZxadnBQknc=
Subject key identifier:   0E:EA:82:EB:3F:5C:A8:BD:C5:0C:2D:76:51:2F:EF:24:A2:F9:90:33
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584EA79663732FC3448A3E4258A0
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/48cee960-b130-391b-9cc3-54cb03cd7a9b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19886
IP address blocks:        171.162.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:63:73:2f:c3:44:8a:3e:42:58:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f7fb4f8e-8847-47ec-a3bd-baedc62c6b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:86:14:cc:87:24:47:aa:13:ab:6a:56:a1:ad:
                    f5:74:f0:99:96:da:82:97:05:bf:d6:80:01:50:f8:
                    49:38:51:6f:99:40:bb:b1:c1:68:d3:48:69:82:1e:
                    0c:73:0e:9a:66:c1:da:ea:02:c5:fb:08:08:00:3c:
                    e1:30:55:47:c0:f2:93:2e:f6:4a:66:6c:8c:d5:27:
                    cf:fe:a9:9a:8d:4d:13:dc:ec:94:08:cf:f1:5a:05:
                    ee:67:6c:bf:a1:b2:aa:6e:4f:e4:b0:f1:25:9b:98:
                    b3:8e:bf:64:b6:f8:c6:79:8a:f0:62:0b:c5:2d:f0:
                    bc:81:29:30:36:d3:d8:9e:5b:dd:8e:27:85:c5:b7:
                    1c:39:bc:e2:f2:8c:0c:26:2a:05:71:40:9b:e7:b4:
                    22:8b:42:b8:4d:36:ac:92:5b:08:db:5d:58:da:4a:
                    01:50:a1:15:f5:77:bf:29:30:b5:de:59:ad:7f:10:
                    62:d3:d9:3c:7b:b3:ea:6b:b0:8d:8a:d1:20:26:4a:
                    94:4c:c7:f6:f1:4c:92:0a:8f:f6:30:53:f5:3c:1d:
                    0e:60:41:16:6f:45:34:4b:c7:36:87:15:ab:79:f7:
                    73:5f:35:c6:7a:f1:e9:e2:9b:64:10:55:46:92:9f:
                    5d:7a:e0:9e:c5:d1:80:f3:92:ca:10:19:10:ab:c1:
                    db:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EA:82:EB:3F:5C:A8:BD:C5:0C:2D:76:51:2F:EF:24:A2:F9:90:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/48cee960-b130-391b-9cc3-54cb03cd7a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:ce:9e:e5:bd:ca:15:c5:76:d6:a2:5e:93:5b:ad:a3:15:
         ad:40:2b:13:0c:c0:bd:67:af:9d:86:97:f5:52:22:f6:55:96:
         89:23:5b:1e:01:ea:c5:69:8a:c0:f3:4c:01:f4:7b:f7:0f:2d:
         94:9d:cd:f1:ba:ca:06:14:59:d6:50:12:17:8d:3c:05:16:2a:
         1f:d6:8f:9d:89:99:4b:a9:c6:f4:63:9d:fc:57:6b:ab:52:22:
         cb:38:28:6f:9e:8b:d8:70:65:d2:36:f8:58:f0:24:b4:45:fc:
         38:70:ab:db:0c:b3:e3:8b:be:9b:51:ca:2a:fc:c0:71:6f:78:
         1e:d1:10:7a:df:27:1a:3f:23:ad:1a:c2:80:a0:15:74:f1:f6:
         6e:5f:12:f6:5f:f2:99:97:07:63:0f:b9:a1:6b:83:2d:ba:c2:
         1b:04:86:70:c8:01:70:6a:96:30:c9:03:3d:18:a2:80:49:ad:
         b5:06:8c:24:b1:21:31:62:99:5c:64:1c:2f:26:72:45:da:8d:
         69:7e:48:f1:58:05:de:d9:e8:c2:b4:10:12:c4:61:04:8d:d6:
         cd:63:a1:be:45:58:2f:77:99:84:41:45:8d:35:1c:4a:92:04:
         e0:27:ff:8e:a2:f2:69:3b:cc:14:59:c0:d9:2a:4e:e7:bf:d2:
         80:00:26:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:52:28 2026 by rpki-client